Nortel 3050 Command Reference Manual page 208

208 Command Reference
The SiteMinder menu is used for configuring the current authentication
ID to use a Netegrity SiteMinder authentication server. When the remote
user logs in to the VPN using this authentication method, user name
and password is checked against a SiteMinder server. Once the user is
successfully authenticated, a user group is returned to the VPN Gateway
from the SiteMinder server.
The VPN Gateway sets a SiteMinder single-sign-on cookie in the client
browser. This means that the user does not have to log in once again
if requesting a password-protected web page on a SiteMinder-aware
backend server. The cookie is automatically validated against the
SiteMinder policy server.
To access the SiteMinder menu, the authentication type for the current
authentication ID must be set to siteminder.
Table 67
SiteMinder Menu Options (/cfg/vpn/aaa/auth/siteminder)
Command Syntax and Usage
servers
failover failover|roundrobin
agentname
Copyright © 2007 Nortel Networks
.
Note:
SiteMinder's tools for authorization are not supported. Access is
granted based on the group access rules defined on the VPN Gateway.
Challenge-based authentication replies (i.e. the New PIN and Next
Token modes of SecurID) from SiteMinder are not supported.
Displays the SiteMinder Servers menu. To view menu options, see
"/cfg/vpn <id> /aaa/auth <id> /siteminder /servers
SiteMinder Servers Configuration" (page
If several SiteMinder authentication servers are configured, this setting
defines the mode for accessing the servers.
•
Failover. If the SiteMinder server configured with index number 1
fails, the VPN Gateway will connect to the server configured with
index number 2.
•
Round robin. The VPN Gateway will connect to the SiteMinder
servers on a turn basis, i.e. the first connection request is directed
to the SiteMinder server configured with index number 1, the second
to the server configured with index number 2 and so on.
If only one SiteMinder server is configured, this setting has no effect.
The default value is roundrobin.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
211).